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IN THE CLAIMS 

For the convenience of the Examiner, all pending claims of the present 
Application are shown below in numerical order whether or not an amendment has been 
made and applying the revised format guidelines of 37 CFR 1.121. 



Claims 1 - 26 (Canceled) 

27. (Previously Presented) A method for preventing hostile use of computer 
resources by an application running on a workstation, comprising: 

providing a filter on a workstation for receiving internal requests for computer 
resources resident on the workstation; 

receiving at the filter a request for access identifying a computer resource resident on 
the workstation, the request for access generated by an unspecified application dovraloaded to 
the workstation from a source external to the workstation, the unspecified application not 
identifiable in a pre-set list of hostile applications; 

determining whether the requested computer resource is on a list of one or more 
computer resources that are not accessible to unspecified applications; 

allowing access to the requested computer resource if the requested computer 
resource is not on the list; and 

preventing access to the requested computer resource if the requested computer 
resource is on the list. 



28. (Previously Presented) The method of Claim 27, wherein the list of one or 
more computer resources comprises a look-up table, 

29. (Previously Presented) The method of Claim 27, wherein the requested 
computer resource is selected from the group consisting of a memory allocation, a file, and a 
directory. 

30. (Previously Presented) The method of Claim 27, wherein the requested 
computer resource is selected from the group consisting of a copy command, a delete 
command, and a compress command. 



DAL01:891870.1 



ATTORNEY DOCKET NO. 
0063170,6607 
(20000058) 

3 

31. (Previously Presented) The method of Claim 27, wherein the requested 
computer resource comprises an operation that when performed leads to a permanent change 
in the workstation. 

32. (Previously Presented) The method of Claim 27, wherein receiving the 
request comprises receiving a direct request generated by the unspecified application. 

33. (Previously Presented) The method of Claim 27, wherein receiving the 
request comprises receiving an indirect request generated by the unspecified application. 

34. (Previously Presented) The method of Claim 27, wherein the list of one or 
more computer resources comprises a list of one or more computer resources that the 
unspecified application may use during operations performed by the unspecified application. 

35. (Withdrawn) A method for preventing hostile use of computer resources by 
an application running on a workstation, comprising: 

providing a filter on a workstation for receiving intemal requests for computer 
resources resident on the workstation; 

receiving at the filter a request for access from an application resident on the 
workstation, the request for access identifying a computer resource resident on the 
workstation, 

determining if the request for access has exceeded a pre-set threshold identifying a 
limited number of processes that may be initiated by the application; 

allowing access to the requested computer resource if the request for access has not 
exceeded the pre-set threshold; and 

preventing access to the requested computer resource if the request for access has 
exceeded the pre-set threshold. 

36. (Withdrawn) The method of Claim 35, wherein the application from which 
the request for access is received comprises an unspecified application downloaded to the 
workstation from a source external to the workstation, the unspecified application not 
identifiable in a pre-set list of hostile applications. 
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37. (Withdrawn) The method of Claim 35, wherein the requested computer 
resource is selected from the group consisting of a memory allocation, a file, and a directory. 

38. (Withdrawn) The method of Claim 35, wherein the requested computer 
resource is selected from the group consisting of a copy command, a delete command, and a 
compress command. 

39. (Withdrawn) The method of Claim 35, wherein the requested computer 
resource comprises an operation that when performed leads to a permanent change in the 
workstation. 

40. (Withdrawn) The method of Claim 35, wherein receiving the request 
comprises receiving a direct request generated by the unspecified application. 

41. (Withdrawn) The method of Claim 35, wherein receiving the request 
comprises receiving an indirect request generated by the unspecified application. 

42. (Previously Presented) A workstation for preventing hostile use of computer 
resources by an application running on the workstation, comprising: 

a memory operable to store one or more applications, at least one application 
comprising an unspecified application received from the network as a downloadable 
application, the unspecified application not identifiable in a pre-set list of hostile applications; 
and 

a processor coupled to the memory and operable to: 

maintain a list of one or more computer resources that are not accessible to 
any unspecified applications; 

in response to a request received from the unspecified application, determine 
whether a requested computer resource is on a list of one or more computer resources that are 
not accessible to any unspecified applications; 

allow access to the requested computer resource if the requested computer 
resource is not on the list; and 

prevent access to the requested computer resource if the requested computer 
resource is on the list. 
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43. (Previously Presented) The workstation of Claim 42, wherein the list of one 
or more computer resources comprises a look-up table. 

44. (Previously Presented) The workstation of Claim 42, wherein the requested 
computer resource is selected from the group consisting of a memory allocation, a file, and a 
directory. 

45. (Previously Presented) The workstation of Claim 42, wherein the requested 
computer resource is selected from the group consisting of a copy command, a delete 
command, and a compress command. 

46. (Previously Presented) The workstation of Claim 42, wherein the requested 
computer resource comprises an operation that when performed leads to a permanent change 
in the workstation. 

47. (Previously Presented) The workstation of Claim 42, wherein the request 
from the unspecified application comprises a direct request. 

48. (Previously Presented) The workstation of Claim 42, wherein the request 
from the unspecified application comprises an indirect request. 

49. (Previously Presented) The workstation of Claim 42, wherein the list of one 
or more computer resources comprises a list of one or more computer resources that the 
unspecified application may use during operations performed by the unspecified application. 
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50. (Withdrawn) A workstation for preventing hostile use of computer resources 
by an application running on the workstation, comprising: 

a memory operable to store one or more applications; and 

a processor in communication with the memory and operable to: 

in response to a received request for access, determine if the request has 

exceeded a pre-set threshold identifying a limited number of processes that may be initiated 

by an application; 

allow access to the requested computer resource if the request for access has 
not exceeded the pre-set threshold; and 

prevent access to the requested computer resource if the request for access has 
exceeded the pre-set threshold. 

5 1 . (Withdrawn) The workstation of Claim 50, wherein at least one of the one or 
more applications comprise an unspecified application downloaded to the workstation from a 
source external to the workstation, the unspecified application not identifiable in a pre-set list 
of hostile applications. 

52. (Withdrawn) The workstation of Claim 50, wherein the requested computer 
resource is selected from the group consisting of a memory allocation, a file, and a directory. 

53. (Withdrawn) The workstation of Claim 50, wherein the requested computer 
resource is selected from the group consisting of a copy command, a delete command, and a 
compress command. 

54. (Withdrawn) The workstation of Claim 50, wherein the requested computer 
resource comprises an operation that when performed leads to a permanent change in the 
workstation. 

55. (Withdrawn) The workstation of Claim 50, wherein the request fi-om the 
unspecified application comprises a direct request. 

56. (Withdrawn) The workstation of Claim 50, wherein the request from the 
unspecified application comprises an indirect request. 
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57. (Previously Presented) Logic for preventing hostile use of computer 
resources by an application running on a workstation, the logic encoded in media and 
operable when executed to: 

provide a filter on a workstation for receiving internal requests for computer resources 
resident on the workstation; 

receive at the filter a request for access identifying a computer resource resident on 
the workstation, the request for access generated by an unspecified application downloaded to 
the workstation from a source external to the workstation, the unspecified application not 
identifiable in a pre-set list of hostile applications; 

determine whether the requested computer resource is on a list of one or more 
computer resources that are not accessible to unspecified applications; 

allow access to the requested computer resource if the requested computer resource is 
not on the list; and 

prevent access to the requested computer resource if the requested computer resource 
is on the list. 

58. (Previously Presented) The logic of Claim 57, wherein the list of one or 
more computer resources comprises a look-up table. 

59. (Previously Presented) The logic of Claim 57, wherein the requested 
computer resource is selected from the group consisting of a memory allocation, a file, and a 
directory. 

60. (Previously Presented) The logic of Claim 57, wherein the requested 
computer resource is selected from the group consisting of a copy command, a delete 
command, and a compress command. 

61. (Previously Presented) The logic of Claim 57, wherein the requested 
computer resource comprises an operation that when performed leads to a permanent change 
in the workstation. 

62. (Previously Presented) The logic of Claim 57, wherein receiving the request 
comprises receiving a direct request generated by the unspecified application. 
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63. (Previously Presented) The logic of Claim 57, wherein receiving the request 
comprises receiving an indirect request generated by the unspecified application. 

64. (Previously Presented) The logic of Claim 57, wherein the list of one or 
more computer resources comprises a list of one or more computer resources that the 
unspecified application may use during operations performed by the unspecified application. 

65. (Withdrawn) Logic for preventing hostile use of computer resources by an 
application running on a workstation, the logic encoded in media and operable when executed 
to: 

provide a filter on a workstation for receiving internal requests for computer resources 
resident on the workstation; 

receive at the filter a request for access from an application resident on the 
workstation, the request for access identifying a computer resource resident on the 
workstation, 

determine if the request for access has exceeded a pre-set threshold identifying a 
limited number of processes that may be initiated by the application; 

allow access to the requested computer resource if the request for access has not 
exceeded the pre-set threshold; and 

prevent access to the requested computer resource if the request for access has 
exceeded the pre-set threshold. 

66. (Withdrawn) The logic of Claim 65, wherein the application from which the 
request for access is received comprises an unspecified application downloaded to the 
workstation from a source external to the workstation, the unspecified application not 
identifiable in a pre-set list of hostile applications. 

67. (Withdrawn) The logic of Claim 65, wherein the requested computer 
resource is selected from the group consisting of a memory allocation, a file, and a directory. 

68. (Withdrawn) The logic of Claim 65, wherein the requested computer 
resource is selected from the group consisting of a copy command, a delete command, and a 
compress command. 
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69. (Withdrawn) The logic of Claim 65, wherein the requested computer 
resource comprises an operation that when performed leads to a permanent change in the 
workstation. 

70. (Withdrawn) The logic of Claim 65, wherein receiving the request comprises 
receiving a direct request generated by the unspecified application. 

71. (Withdrawn) The logic of Claim 65, wherein receiving the request comprises 
receiving an indirect request generated by the unspecified application. 
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